Open source supply chain faces security issues

The open source software supply chain shows signs of 'AppSec exhaustion,' with organizations showing diminished engagement in security practices and struggling to meet vulnerability management goals, according to a new report. The study from Snyk, based on a survey of 453 professionals across application development and security, shows that open-source security is more important than ever, as hackers have recognized the efficiency of targeting open-source software as a single entry point to multiple orgs. But despite how important these issues have become, organizations have dedicated less tooling and training resources to supply chain vulnerabilities compared to 2023. The number of… [Continue Reading]